diff --git a/flake.nix b/flake.nix index c038be2..9dc2309 100644 --- a/flake.nix +++ b/flake.nix @@ -78,6 +78,7 @@ ./modules/monitoring/monitoring.nix ./modules/books.nix ./modules/paperless.nix + ./modules/minio.nix ./modules/plausible.nix ./modules/vaultwarden.nix ./modules/hledger.nix diff --git a/modules/minio.nix b/modules/minio.nix new file mode 100644 index 0000000..f0c9cc3 --- /dev/null +++ b/modules/minio.nix @@ -0,0 +1,40 @@ +{ config, ... }: +{ + services = { + minio = { + enable = true; + region = "ap-south-1"; + listenAddress = "0.0.0.0:9909"; + consoleAddress = "0.0.0.0:9910"; + browser = true; + rootCredentialsFile = "/run/agenix/minio"; + }; + + nginx = { + enable = true; + virtualHosts = { + "minio.bhankas.org" = { + addSSL = true; + enableACME = true; + locations."/" = { + proxyPass = "http://${config.services.minio.consoleAddress}"; + proxyWebsockets = false; + extraConfig = + "proxy_set_header Host $host;" + ; + }; + }; + }; + }; + }; + + security.acme = { + acceptTerms = true; + certs = { + "minio.bhankas.org" = { + email = "admin@bhankas.org"; + dnsResolver = "1.1.1.1:53"; + }; + }; + }; +}